DATA PRIVACY

The protection of your personal data is very important to us.

Personal data within the meaning of this declaration are all data relating to an identified or identifiable person.

This privacy policy forms the basis on which we process personal data which we collect from you via the website www.hamburg-open.com or which you make available to us via these websites.

1. CONTROLLER AND DATA PROTECTION OFFICER

The party responsible within the meaning of the General Data Protection Regulation (GDPR) is RBG Reichel Business Group GmbH, Maximilianstrasse 30, A-4600 Wels, or, after the company has been founded, MatchMaker Sports GmbH, Hallerstrasse 89, D-20149 Hamburg. As data controller, it decides on the purposes and means of processing your personal data.

Do you have questions about the processing of your personal data? Please contact us by e-mail: office@rbgroup.at or by phone at +43 7242/63747-0

2. COLLECTION AND USE OF PERSONAL DATA

The type and extent to which we collect and use your personal data depends on whether you only use our websites for informational purposes or utilize one of our provided offers.

2.1. Informational use of our website

For the purely informational use of our website, it is generally not necessary for you to provide personal data.

In this case, we only collect and use the data that your Internet browser automatically transmits to us. These data include:

• Date and time of your access
• Information about your browser type and the browser version you use
• Your IP address
• The operating system you use
• The amount of data transferred and the access status (e.g. file transferred, file not found, etc.)
• The loading times of our website
• Information about the website from which you accessed our site

We do not use the above data to draw conclusions about your usage behaviour or for other personal evaluations

On the basis of Art.  6 para. 1 lit. f GDPR, we use the above data solely for the purpose of enabling you to access our websites and their content, as well as for statistical purposes and to improve our website offering

2.2. Order forms

Our website www.hamburg-open.com has various order forms that you can use to purchase tickets for our events. If you make use of this option, we will ask you to enter the following data in the respective input screen:

Name; address; date of birth; e-mail address; telephone number; bank details; promotion details, e.g. membership numbers

This data is transmitted to us when the order is sent.

On the basis of Art. 6 para. 1 lit. b GDPR, we collect and use the above data for the purpose of processing your orders. For instance, we use your address to send you the ordered tickets or your account data for payment processing. The processing of the above-mentioned data thus serves the sole purpose of implementing our contracts with you or, at your request, to take pre-contractual measures.

2.3. E-mail inquiries

In addition, you may contact us via the e-mail addresses published on our websites. In this case, the personal data that you send us in the e-mail will be stored.

We exclusively use the personal data that you provide us when sending us e-mail inquiries for the purpose of processing your requests.

The legal basis for the processing of the above personal data is Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to process enquiries and to maintain our relationship with you. Art.  6 para. 1 lit. b GDPR is also the legal basis for processing your personal data if your purpose in contacting us is to conclude a contract with us.

2.4. Newsletter, right of objection

We use your e-mail address and your name to provide you with information about products and services via our newsletter. There are 2 options for the provision of our newsletter:

1. a) You can subscribe to our newsletter by entering your e-mail address and name in a registration form on our websites. By subscribing to our newsletter you will receive advertising and the latest news about the Hamburg Open.

By subscribing to our newsletter, you give us your consent to process and use the aforementioned contact information for the purpose of sending you e-mails (Art. 6 para. 1 lit. b GDPR). For sending out the newsletter, we use the so-called double opt-in procedure, i.e. we will only send you the newsletter if you first confirm your registration via a confirmation e-mail sent to you for this purpose via the included link. This is to ensure that only you, as the owner of the provided e-mail address, can subscribe to the newsletter.

You can object to receiving the newsletter you have subscribed to at any time and accordingly unsubscribe. For this purpose, you can either send us an informal e-mail to the e-mail address listed under section 1 or cancel your subscription using the link at the end of each newsletter.

1. b) If we have received your e-mail address from you in connection with the sale of a product or service, we may use it to send you information about goods and services via newsletter similar to those you have already purchased or requested from us. This form of direct marketing within the framework of existing customer relationships is in our legitimate interest (Art. 6 para. 1 lit. f GDPR).

You have the right to object to receiving this newsletter at any time, without incurring any costs other than the transmission costs according to the basic rates. To exercise your right of objection, please use the link at the end of each newsletter or contact us at the e-mail address listed in section 1.

We will inform you about the use of your personal data for the purposes mentioned above and about your right of objection before sending any order.

3. COOKIES

So-called “cookies” are used on our website.

3.1. What are cookies?

Cookies are small text files that are sent to your browser by our web server when you visit our websites and are stored on your terminal device for later retrieval. When you repeatedly visit our websites, the information stored on your terminal device is returned to us.  This exchange of information serves to make our website more user-friendly and efficient for you.

3.2 What kind of cookies do we use?

Our websites use so-called “session cookies.” These cookies only store and retrieve the information that is necessary for us to make the functions of our websites technologically available to you. For example, we use session cookies to store information about the contents of your shopping cart so that it can be displayed over several pages (e.g. during the ordering process). The session cookies we use are deleted at the end of each browser session.

The use of session cookies to guarantee the functionality of our websites is in our legitimate interest (Art. 6 para. 1 lit. f GDPR).

3.3. How can you prevent the use of cookies?

You can determine whether cookies can be set and retrieved by means of the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser to automatically notify you when a cookie is about to be stored and to ask you for confirmation. You can block or delete individual cookies. For technical reasons, however, this can lead to some functions of our websites being impaired and no longer functioning fully.

You can also opt-out of the use of cookies for audience measurement and advertising purposes by visiting the Network Advertising Initiative opt-out page (http://optout.networkadvertising.org/) and additionally the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

4. GOOGLE ANALYTICS

Our websites use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google Analytics helps us to determine which areas of our websites are popular or less popular with users, allowing us to monitor and optimise the effectiveness of our website design. The use of Google Analytics is therefore based on Art. 6 para. 1 letter f GDPR in the legitimate interest of RBG or MatchMaker Sports GmbH or on the basis of your prior consent (Art. 6 para. 1 letter a GDPR).

4.1. Google Tag Manager

Google Tag Manager is a tool that allows us to manage so-called website tags via an interface (and thus integrate e.g. Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process any personal data of the users. With regard to the processing of users’ personal data, we refer to the following information on Google services. Usage guidelines https://www.google.com/intl/de/tagmanager/use-policy.html.

4.2. Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transferred to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAItatus=Active).

Google uses this information on our behalf to evaluate the utilization of our website by users, to compile reports on the activities within this website and to provide us with further services related to the utilization of this website and the Internet. Pseudonymous user profiles of the users can be created from the processed data.

We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

The IP address transmitted by the user’s browser is not combined with other data from Google. Users can prevent the storage of cookies by means of a corresponding setting in their browser software; users can also prevent the collection of data generated by the cookie and relating to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can find further information on the use of data by Google, setting and objection possibilities in the Google privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

The personal data of the users will be deleted or made anonymous after 14 months.

4.3. Google Universal Analytics

We use Google Analytics in the form of “Universal Analytics”. “Universal Analytics” refers to a Google Analytics method in which user analysis is based on a pseudonymous user ID, thus creating a pseudonymous profile of the user with information from the use of various devices (so-called “cross-device tracking”).

4.4. Audience determination with Google Analytics

We use Google Analytics to ensure that ads served within Google’s advertising services and those of its partners are only shown to users who have shown an interest in our online offerings or who display certain attributes (e.g., interests in certain topics or products determined by the web pages visited) that we pass on to Google (so-called  “remarketing audiences” or  “Google Analytics Audiences”). With the help of remarketing audiences, we also want to ensure that our ads match the potential interests of the users.

4.5. Google AdWords and conversion measurement

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).

Google is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAItatus=Active).

We use the Google “AdWords” online marketing process to place ads on the Google advertising network (e.g., in search results, in videos, on web pages, etc.) so that they are displayed to users who have a presumed interest in the ads. This allows us to display advertisements for and within our online offering in a more targeted manner in order to present users only with advertisements that potentially match their interests. For instance, if a user is shown advertisements for products that he or she has shown an interest in with respect to other online offers, this is referred to as “remarketing”. For these purposes, when you visit our website and other websites on which the Google advertising network is active, Google will execute a piece of code directly from Google and embed (re)marketing tags (invisible graphics or code, also known as “web beacons”) in the website. With their help, an individual cookie, i.e. a small file is stored on the user’s device (instead of cookies, comparable technologies can be used). This file records which websites the user has visited, the content he or she is interested in and which offers the user has clicked on, as well as technical information on the browser and operating system, referral websites, visiting time and other information on the use of the online offer.

Furthermore, we receive an individual “conversion cookie”. The information collected by the cookie is used by Google to compile conversion statistics for us. However, we only learn the total number of anonymous users who clicked on our ad and were redirected to a page with a conversion tracking tag. We, nonetheless, do not receive any information that can be used to identify users personally.

User data is processed pseudonymously within the Google advertising network.  For example, Google does not store and process the name or e-mail address of the user, but processes the relevant cookie-related data within pseudonymous user profiles. This means that from Google’s perspective, ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected about users is transmitted to Google and stored on Google’s servers in the USA.

You can find further information on the use of data by Google, setting and objection possibilities in the Google privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

GOOGLE ANALYTICS OPT-OUT

5. SOCIAL PLUG-INS

Our websites use social plug-ins from the providers “Facebook”, “Twitter”, “Instagram”. The social plug-ins are identified by the different logos of the providers.

When you visit our websites, the plug-ins do not automatically transmit data to the above-mentioned providers. Only when you activate the plug-ins by clicking on them do you give your consent for a connection to be established to the servers of the providers and for data to be transmitted to them (Art. 6 para. 1 lit. a GDPR).

We have no influence on the type and scope of the data collected and stored by the respective providers using the plug-ins. You can find information on this in the privacy policy declarations of the respective providers:

Facebook: https://www.facebook.com/privacy/explanation
Twitter: https://twitter.com/de/privacy
Instagram: https://help.instagram.com/155833707900388

5.1. Facebook Pixel, Custom Audiences and Facebook Conversion

Due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes, the so-called  “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used within our online offer.

Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAACtatus=Active).

By using the Facebook pixel, Facebook is able, on the one hand, to identify the visitors of our online offer as a target group for the presentation of advertisements (so-called “Facebook Ads”) Accordingly, we use the Facebook pixel to display the Facebook ads that we have activated only to those Facebook users who have also shown an interest in our online offering or who exhibit certain attributes (e.g. interests in certain topics or products determined by the websites visited) that we transmit to Facebook (so-called  “custom audiences”). By using the Facebook pixel, we also want to ensure that our Facebook ads match the users’ potential interest and are not intrusive. The Facebook pixel also allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook ad (so-called  “conversion”).

The processing of data by Facebook takes place within the scope of Facebook’s data use policy. You will therefore find general information on the display of Facebook ads in the Facebook data usage policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and how it works can be found in the Facebook help section: https://www.facebook.com/business/help/651294705016616.

You may object to the collection by the Facebook pixel and the use of your information to display Facebook ads. To control what types of ads are displayed to you within Facebook, you can go to the page that Facebook has set up and follow the instructions on usage-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

6. INTEGRATION OF EXTERNAL SERVICE PROVIDERS, COOPERATION WITH CREDIT INSTITUTIONS AND PAYMENT SERVICE PROVIDERS, DATA TRANSFER TO THIRD PARTIES

6.1. Integration of external service providers

We may work with external service providers to fulfil our contracts with you, to provide our website or to achieve other processing purposes mentioned in this privacy policy. Your personal data will only be passed on to these external service providers to the extent necessary to carry out the above-mentioned tasks.

We carefully select the external service providers who assist us in performing the above-mentioned tasks and require that they use your personal data in accordance with this privacy policy and existing order processing agreements. As a rule, the external service providers only process the transmitted personal data according to our instructions.

The categories of external service providers who receive your data include

• Technical service providers
• Our technical service providers include hosting service providers and e-mail transmission service providers.
• Usage-analysis-tool providers
• Online ticket-shop service providers

Online ticket-shop service providers support us in the processing of ticket purchases and the subsequent delivery of the tickets or mediate the purchase of tickets between us and our customers.

6.2. Cooperation with credit institutions and payment service providers

To process your orders, we work together with credit institutions and other external payment service providers.

Depending on which payment option you choose when placing your order, we will pass on the necessary data for processing the payment to the credit institution or payment service provider entrusted with the payment. Such data may include:

Bank details, credit card details, name and contact details

The payment service providers or credit institutions process these data partly on their own responsibility. To this extent, the privacy policy declaration of the respective payment service provider or credit institution also applies.

6.3. Data transmission to third parties

In all other respects, we only transfer the personal data that we collect and process in accordance with the provisions of sections 2 to 5 – unless expressly stated otherwise in this privacy policy declaration – to third parties if you have given us your prior consent to do so.

In addition, we transmit your data to third parties insofar as we are obliged to do so due to legal provisions or court or official orders.

7. STORAGE OF YOUR PERSONAL DATA

We store your personal data within the EU.

We only store your personal data for as long as necessary to accomplish the above-mentioned processing purposes. If the respective processing purpose no longer applies, the personal data will be deleted or blocked in accordance with the legal requirements.

If the storage of your personal data is necessary due to a legal provision to which the controller is bound, your personal data will be blocked or deleted once the storage period prescribed by the legal provision expires.

8. PROTECTION OF YOUR PERSONAL DATA

We use technical and organizational security measures to protect the personal data that we collect and that you have provided to us, in particular against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

However, we wish to point out that data transmission on the Internet (e.g. when communicating by e-mail) is unfortunately not completely secure. While we will do our best to protect your personal information, we cannot guarantee the complete security of your data.

9. YOUR RIGHTS

You have the right of access to your personal data (Art. 15 GDPR, § 34 BDSG). You can also request the correction (Art. 16 GDPR), deletion (Art. 17 GDPR, § 35 BDSG) and transfer (Art. 20 GDPR) of your personal data.

You are entitled to object to the processing of your personal data (Art. 21 GDPR) or to demand the restriction of processing (Art. 18 GDPR, § 35 BDSG).

If you have given us permission to process your personal data, you can revoke this permission at any time with effect for the future.

In order to assert the above rights, please contact the controller using the contact details listed under section 1.

You also have the right to lodge a complaint with a supervisory authority.

INFORMATION ON YOUR RIGHT OF OBJECTION UNDER ART. 21 GDPR

General right of objection (Art. 21 [1] GDPR)
You have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data concerning you carried out pursuant to Art.  6 para. 1 lit. e (public interest) or Art.  6 para. 1 lit. f (legitimate interest), including profiling based on these provisions.

Right of objection for direct marketing (Art. 21 [2] GDPR)
You can object to the processing of your personal data for the purpose of direct marketing at any time without providing any reasons. This also applies to profiling, insofar as it is related to such direct advertising.

Recipient of the notice of objection
Please address your objection to the controller using the contact details listed in section 1.

Use of the remarketing or “similar audiences” function of Google Inc.
On our website, we use the remarketing or “similar audiences” function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). This function serves the purpose of analysing visitor behaviour and interests.
Google uses cookies to analyse website usage, which forms the basis for the creation of interest-based advertisements. Cookies are used to record visits to the website as well as anonymous data on the use of the website. No personal data of visitors to the website is stored. If you visit any other site on the Google Display Network below, you will see ads that most likely include previously viewed product and information categories.
Your data may also be transferred to the USA. Data transfers to the USA are subject to an adequacy decision by the European Commission.
The processing is carried out on the basis of Art.  6 para. 1 lit. f GDPR out of a legitimate interest in targeting visitors of the website with advertisements by displaying personalised, interest-based advertising for visitors to the provider’s website when they visit other websites in the Google Display Network.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Art. 6 (1) f GDPR.
You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996?hl=de
Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative’s opt-out page at https://www.networkadvertising.org/choices/ and implementing the further information mentioned there on the opt-out process.
You can find more information about Google remarketing as well as the corresponding privacy policy athttps://www.google.com/privacy/ads/

Use of Google Adwords conversion tracking
We use the online advertising program “Google AdWords” on our website and in this context conversion tracking (evaluation of user actions). Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad activated by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our site and the cookie has not yet expired, Google and we will be able to tell that you clicked on the ad and were redirected to that page. Every Google AdWords customer receives a different cookie. Therefore, there is no way that cookies can be tracked via the websites of AdWords customers.
The information collected by the conversion cookie is used to compile conversion statistics. This tells us the total number of users who have clicked on one of our ads and been redirected to a page with a conversion tracking tag. We, nonetheless, do not receive any information that can be used to identify users personally. The processing is based on the Art. 6 (1) lit. f GDPR from the legitimate interest in targeted advertising and the analysis of the impact and effectiveness of such advertising.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Art. 6 (1) f GDPR.
For this purpose, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, we wish to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics.
You can also disable advertising that is personalized for you in Google’s advertising settings. You can find instructions for this under https://support.google.com/ads/answer/2662922?hl=de In addition, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative’s opt-out page athttps://www.networkadvertising.org/choices/ and implement the further information mentioned there on the opt-out process.
You can find further information as well as Google’s privacy policy at: https://www.google.de/policies/privacy/

Use of Facebook remarketing
On our website, we use the remarketing function “Custom Audiences” of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”).
This function serves the purpose of targeting website visitors with interest-based advertising on the social network Facebook.
For this purpose, the Facebook remarketing tag was embedded on the website. This tag is used to establish a direct connection to the Facebook servers when the website is visited. It will transmit to the Facebook server the pages of our website you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will then see personalized, interest-based Facebook ads. The processing is based on the Art. 6 (1) lit. f GDPR out of the legitimate interest in the above-mentioned purpose.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Art. 6 (1) f GDPR.
You also can do this by deactivating the remarketing function “Custom Audiences” here. You can find more information on the collection and use of data by Facebook, on your rights in this regard and on ways to protect your privacy in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

Use of YouTube
On our website, we use the function for embedding YouTube videos from YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; “YouTube”).
YouTube is a company affiliated with Google Inc.  (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The option “Privacy-Enhanced Mode” is activated. As a result, YouTube does not store any information about visitors to the site. Only when you watch a video is information about it sent to YouTube and stored there.
You can find more information on the collection and use of data by YouTube and Google, on your rights in this regard and on ways to protect your privacy in the YouTube privacy policy (https://www.youtube.com/t/privacy).

Hotjar
We use Hotjar in order to better understand the needs of our users and to optimise the offer on this website.  Hotjar’s technology helps us gain a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click, what they like and what they don’t like, etc.), and this allows us to tailor our offering to the needs of our users. Hotjar uses cookies and other technologies to collect information about the behaviour of our users and their terminal devices, including, but not limited to, the IP address of the device (only collected and stored in anonymous form), screen size, device type (unique device identifiers), information about the browser being used, location (country only), preferred language to view our site. Hotjar stores this information in a pseudonymous user profile.  The information will not be used by Hotjar or by us to identify individual users, nor will it be merged with other data about individual users. Further information can be found in Hotjar’s privacy policy.

You can object to Hotjar storing a user profile and information about your visit to our website and to Hotjar tracking cookies being embedded on other websites if you click on this opt-out link.